Go www.velocidex.com/golang/velociraptor

Name: Go www.velocidex.com/golang/velociraptor
Brand: Go

productUS

pkg:golang/www.velocidex.com/golang/velociraptor

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical2high2medium0low

updated 2026-10-28

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-6264US	—OT elevated	1.03% (64th)	Exploit	0.74.3	2025-06-20	< 0.74.3
CVE-2023-0290US	medium4.3	0.74% (55th)	—	0.6.7-5	2023-01-18	< 0.6.7-5
CVE-2023-0242US	high8.8OT elevated	0.54% (46th)	—	0.6.7-5	2023-01-18	< 0.6.7-5
CVE-2026-7573US	high7.7	0.26% (17th)	—	0.76.5	2026-05-06	2 versions
CVE-2026-6863US	—OT elevated	0.24% (15th)	—	0.76.4	2026-05-06	< 0.76.4
CVE-2026-6290US	critical9.1OT elevated	0.22% (13th)	—	no fix	2026-04-15	2 versions
CVE-2026-7572US	medium5.5	0.14% (4th)	—	0.76.5	2026-05-06	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-863Incorrect Authorization2 CVEs
CWE-193Off-by-one Error1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-276Incorrect Default Permissions1 CVEs
CWE-639Authorization Bypass Through User-Controlled Key1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.